{
    "type": "bundle",
    "id": "bundle--00204bcf-4972-4c51-b966-c619745a7da0",
    "objects": [
        {
            "type": "attack-pattern",
            "spec_version": "2.1",
            "id": "attack-pattern--4c1c82a2-472b-4b47-8c5e-21d2bfee7d2e",
            "created_by_ref": "identity--a8e469c7-4cdc-48e5-8a70-ac9062394b80",
            "created": "2022-07-02T19:59:12.735522Z",
            "modified": "2022-07-02T19:59:12.735522Z",
            "name": "Misattribute Activity",
            "description": "Misattributed activity refers to incorrectly attributed operation activity. For example, a state sponsored influence operation may conduct operation activity in a way that mimics another state  so that external entities misattribute activity to the incorrect state. An operation may misattribute  their activities to complicate attribution, avoid detection, or frame an adversary for negative  behavior. ",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "mitre-attack",
                    "phase_name": "persist-in-the-information-environment"
                }
            ],
            "external_references": [
                {
                    "source_name": "DISARM",
                    "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.010.md",
                    "external_id": "T0129.010"
                }
            ],
            "object_marking_refs": [
                "marking-definition--89701ab3-0436-4c2b-a1a0-ef84381ac1d7"
            ],
            "x_mitre_is_subtechnique": true,
            "x_mitre_platforms": [
                "Windows",
                "Linux",
                "Mac"
            ],
            "x_mitre_version": "1.0"
        }
    ]
}
